Route Origin Authorization

$ rpki-client -vvf rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa
File:                     3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa (raw, json)
Hash identifier:          fn1MOIBgE5Swma7HSUIWj3J3RiVdRP+qpN+Sqj1ov9M=
Subject key identifier:   E7:28:EC:3B:4F:5A:D5:AD:D4:12:53:4E:04:F0:A4:7F:AD:F3:78:95
Certificate issuer:       /CN=67EFB834694FDF326541D90AA7679322947189B3
Certificate serial:       17CC69AF1D4A9A3C1F8C3F3275F7F4C3CC12B7E7
Authority key identifier: 67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3
Authority info access:    rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
Subject info access:      rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa
Signing time:             Sun 03 May 2026 03:06:09 +0000
ROA not before:           Sun 03 May 2026 03:01:09 +0000
ROA not after:            Sun 02 May 2027 03:06:09 +0000
asID:                     7713
IP address blocks:        103.149.120.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl
                          rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.mft
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
                          rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 13 May 2026 18:26:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:cc:69:af:1d:4a:9a:3c:1f:8c:3f:32:75:f7:f4:c3:cc:12:b7:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67EFB834694FDF326541D90AA7679322947189B3
        Validity
            Not Before: May  3 03:01:09 2026 GMT
            Not After : May  2 03:06:09 2027 GMT
        Subject: CN=E728EC3B4F5AD5ADD412534E04F0A47FADF37895
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:95:c5:09:c9:49:64:de:67:ea:db:7d:6a:ac:
                    80:96:5d:83:74:f1:00:78:4e:14:c4:68:ff:8a:99:
                    e1:48:08:80:94:4c:91:88:9d:f2:b2:08:61:2c:3d:
                    e5:dc:71:40:9b:10:ea:d8:3f:7e:04:4a:64:87:91:
                    43:6c:65:6a:82:a2:58:f2:4a:7d:8f:46:23:e7:88:
                    8d:c6:d9:64:4f:b2:69:77:81:3f:17:2e:aa:7c:56:
                    54:65:01:4e:14:e6:cb:f6:0f:80:79:8b:c5:0f:52:
                    b0:01:49:cb:57:91:a7:90:2f:7b:72:0f:57:af:d8:
                    d7:15:75:77:98:83:2a:08:e3:ff:6c:ca:5d:d5:b5:
                    2a:03:40:41:e9:50:bc:09:d7:87:d3:62:e4:54:90:
                    48:a1:4d:a0:1f:bf:8d:65:20:5f:79:83:84:98:7b:
                    e1:93:4b:74:69:26:ad:66:b0:62:02:af:96:7c:e1:
                    e9:62:14:c4:98:a4:fa:56:84:d2:6a:0a:a2:40:67:
                    72:c9:7a:14:77:7a:cd:da:1a:34:b5:f5:16:3d:c1:
                    f4:23:5b:af:27:4e:09:7d:6c:15:28:a3:8e:4e:8a:
                    11:dc:dc:b8:7e:37:f6:5b:a4:17:3b:2c:d3:4a:00:
                    d3:c0:12:6b:73:db:3b:de:10:53:49:30:9a:28:21:
                    ae:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:28:EC:3B:4F:5A:D5:AD:D4:12:53:4E:04:F0:A4:7F:AD:F3:78:95
            X509v3 Authority Key Identifier:
                keyid:67:EF:B8:34:69:4F:DF:32:65:41:D9:0A:A7:67:93:22:94:71:89:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/67EFB834694FDF326541D90AA7679322947189B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/67EFB834694FDF326541D90AA7679322947189B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c8d0e640-22e9-441c-8634-f9525307da76/0/3130332e3134392e3132302e302f32332d3233203d3e2037373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.120.0/23

    Signature Algorithm: sha256WithRSAEncryption
         de:69:73:75:35:4c:95:eb:b6:94:06:52:bc:a5:1c:0b:41:02:
         40:44:31:f1:9f:07:84:d1:10:7b:2e:38:b9:53:0a:c6:5b:61:
         35:b4:11:40:c4:20:6c:cd:8e:1d:39:11:dc:f0:7d:c7:5d:8d:
         84:4e:01:04:d0:ac:eb:da:ee:2b:05:35:6c:21:14:75:3e:2b:
         3a:d3:ea:39:a8:c0:b4:82:5d:ae:82:5e:b5:48:4a:e1:f9:0d:
         3e:a4:49:ef:cd:f6:54:a7:0c:b2:ad:f5:ee:60:07:0c:fe:5c:
         32:94:c2:d8:9d:f3:fa:c9:4a:72:c8:fe:0e:c4:83:2a:b5:4e:
         37:c4:ee:1d:36:cf:14:0b:eb:e5:77:0e:4f:21:78:e1:b0:c6:
         b8:e1:44:3a:07:5d:f8:12:e6:5e:34:f0:7c:e3:20:82:c5:52:
         db:6c:4a:c5:49:91:09:e5:77:9d:91:c6:2b:20:db:22:1a:12:
         09:21:8e:f1:5a:b9:2b:b8:a8:43:5b:c3:7c:8a:20:88:97:b2:
         60:a8:9e:a1:82:25:f9:2d:d5:b6:b1:3e:d9:44:9c:57:ca:77:
         8a:a3:3d:f1:23:1b:f8:0b:52:20:81:52:15:7f:30:2c:6e:34:
         b9:28:57:f1:6f:ae:cb:14:b7:99:6a:f2:5e:2f:72:2c:44:93:
         8d:1f:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:15:19 2026 by rpki-client